EUVD-2026-75180

Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader...

CVE-2026-51385

CVE-2026-51385 Aviso para CVE-2026-51385. Necesario publicarlo ya que GRAPHIFY no ha reconocido el aviso ni lo ha publicado, y MITRE asignó CVE-2026-51385, este es el aviso correspondiente. ES: Este fue mi primer cve, para ser honesto encontre una manera de romper la logica en la funcion ANTI SSR...

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL ingestion process. An attacker can access internal or private network resources by crafting a URL containing an ISATAP IPv6 literal that embed...

Server-side Request Forgery (SSRF)

Overview @openclaw/nostr is an OpenClaw Nostr channel plugin for NIP-04 encrypted DMs Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL ingestion process. An attacker can access internal or private network resources by crafting a URL containing an...

CVE-2026-27170 OpenSift: SSRF risk in URL ingestion endpoint

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive server-side fetch behavior and can be coerced into requesting unsafe targets. Potential access/probing of private/local...

CVE-2026-27170 OpenSift: SSRF risk in URL ingestion endpoint

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive server-side fetch behavior and can be coerced into requesting unsafe targets. Potential access/probing of private/local...

CVE-2026-27170

Summary (concrete details): OpenSift versions up to 1.1.2-alpha are affected by a flaw in the URL ingestion flow where server-side fetch behavior is overly permissive. An attacker-controlled URL could cause the host process to probe or access private/local network resources. The issue is fixed in...

CVE-2026-27170 OpenSift: SSRF risk in URL ingestion endpoint

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. In versions 1.1.2-alpha and below, URL ingest allows overly permissive server-side fetch behavior and can be coerced into requesting unsafe targets. Potential access/probing of private/local...